forked from indymedia/epicyon
Check that deletions are allowed
parent
7c7bb45c0d
commit
862cc3b68a
|
@ -310,6 +310,7 @@ class PubServer(BaseHTTPRequestHandler):
|
|||
outboxUndoLike(self.server.baseDir,self.server.httpPrefix, \
|
||||
self.postToNickname,self.server.domain,self.server.port, \
|
||||
messageJson,self.server.debug)
|
||||
if self.server.allowDeletion:
|
||||
if self.server.debug:
|
||||
print('DEBUG: handle delete requests')
|
||||
outboxDelete(self.server.baseDir,self.server.httpPrefix, \
|
||||
|
@ -792,7 +793,7 @@ class PubServer(BaseHTTPRequestHandler):
|
|||
return
|
||||
|
||||
# delete a post from the web interface icon
|
||||
if authorized and '?delete=' in self.path:
|
||||
if authorized and self.server.allowDeletion and '?delete=' in self.path:
|
||||
deleteUrl=self.path.split('?delete=')[1]
|
||||
actor=self.path.split('?delete=')[0]
|
||||
if actor not in deleteUrl:
|
||||
|
|
Loading…
Reference in New Issue